{"report_id":"002f6540-e293-4e21-b05a-08744fe013d0","version":6,"status":"done","tags":[],"date":"2026-02-04T12:54:34Z","url":{"schema":"http","addr":"capcut.to","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"172.67.141.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"capcut.to/","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"title":"Download CapCut Mod APK v16.6.0 Latest Version Premium 2026","dom":{"size":142555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19246)","md5":"f2f1103d75c1c27553c3ba83a8c10c1f","sha1":"5e20472704954402353dd6502ce825f0b2b6a31d","sha256":"fdb8b6ba0ea527ccb54ea8fc5b1c9ddf034d70a45b4dccd30da2d661fb1d43f5","sha512":"05f7da64c2a1d097f6bbee039982cd5be9d8cbfffa170bb85cf9975804ce296b2fa3eac7a495107e73fa0818015839602693f67c7e5bd77023e689a58cd1dfe9","ssdeep":"1536:zxYeJ0GLaZmZVpPuypptzkt2X4Z//bdVVt6lLt7VMR4BsPoFolwOWjWqqcta43oY:zGeJvpPHkoFoo7OUIjYiK","tlshash":"90d3d962939458fd32df876d276da748621b9506ce090febf06bd19863ccac444b3f4a","dom_hash":"domhash93dbb6d723d0f40593c4b55f29a90ab0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"capcut.to","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"172.67.141.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T12:54:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"capcut.to","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-04T12:54:34.75947Z","last_seen":"2026-02-04T12:54:34.75947Z","alert_count":38,"request_count":38,"received_data":1333876,"sent_data":19500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"capcut.to/","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-06T13:40:00.80507Z","times_seen":26641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/f5ccaa3153b143ff661dad5c2a51fc0c.js?ver=1fc0c","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0424a99246ebbfea80aa02c09cd2a5b2","sha1":"114f610e0d0c39693a498046aff2748e6bdb3aac","sha256":"d2be0a483ba77e6e689ceeeaede3d42e6ae31cb12227b947dfd45e746d27224f","sha512":"2d7656cbcfe04bab839d062501c190e8af3fb6f03166a963219e8084df44702087f9ff5ca3da740baf1399deb1cc1d4a66e613e36a67c71e93fb607d90f2582b","ssdeep":"","tlshash":"7511ad24e508b7b7117f23c838b2e1511033b63af6325a3273a211ba2c26980272a65b","size":1086,"data":"","first_seen":"2025-05-30T13:53:24.872872Z","last_seen":"2026-05-12T13:13:19.263949Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHNtb290aD17ImVsZW1lbnRzIjpbIi5zbW9vdGgtc2Nyb2xsIiwibGkuc21vb3RoLXNjcm9sbCBhIl0sImR1cmF0aW9uIjoiODAwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"53d49a01dc2205c92bed9b451b4711cf","sha1":"0e57096171eb5cff670318104131590ba4153f60","sha256":"56af37862649d7dec681eab5509105150819d5e70be3c060c47865b64df2d274","sha512":"ce3ccb57b5a734324ccfe4371613891af9e3c35c47c71e75dacb4907a326b6be97e337d16c0745785019d6eb01164c8620f92a21df756275c3b64579eea3f0f2","ssdeep":"","tlshash":"1fa0024bd10744d604fd67168d82be6b77350082502914568efedd38469cf793ffd265","size":80,"data":"","first_seen":"2023-03-10T00:04:12Z","last_seen":"2026-06-03T23:54:51.910345Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-06-06T13:27:02.917571Z","times_seen":23126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad81beb0a28e87fe3ce3742823d264a8","sha1":"f0aa1a71cc5d0b2b40e1b009486fc627f7703878","sha256":"10531cb9ccd59383133c85843a19c55ba0a27d1a2eb912628e9bd7f68b479aa5","sha512":"ed7834311ae7828b03aa5a7411e9f4bbf5066879ee89fe01f83fa28d1a299733d0a81eea1cc4ab97477bf80c13c5ecf94e398d95c3bd3a2911d480b651c6fb78","ssdeep":"","tlshash":"9131ee7df5291636095661fde399e341a030f0dadc428424efb5cc5ea8cce9548abdf2","size":1717,"data":"","first_seen":"2025-07-25T05:28:04.194173Z","last_seen":"2026-06-06T13:38:21.057736Z","times_seen":16129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGFqYXg9eyJhamF4X3VybCI6Imh0dHBzOi8vY2FwY3V0LnRvL3dwLWFkbWluL2FkbWluLWFqYXgucGhwIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f056a5177357e1496b2d14eaf06ade84","sha1":"9eadea4de499a6b735702aba9a57ede238f9f6b0","sha256":"ee842d50f3a2c71d841abb20a3fb7cc5c83cc1d8e177f01f8b1fe1c96a356fe5","sha512":"0e2cc46defc5dfbd864cf39a3a9ce08380926d656d3c29ec3a0738565d8f97722a77bfd4113d522143b88112b3a85b1a870f12d9716251a20a8502a0341ba4c7","ssdeep":"","tlshash":"27a022a308880fc332c00eca2200322f82f220333e202cc0e2033c0803000c2cc0020b","size":65,"data":"","first_seen":"2026-02-04T12:54:39.541808Z","last_seen":"2026-02-04T12:54:39.541808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIGdlbmVyYXRlcHJlc3NNZW51PXsidG9nZ2xlT3BlbmVkU3ViTWVudXMiOiEwLCJvcGVuU3ViTWVudUxhYmVsIjoiT3BlbiBTdWItTWVudSIsImNsb3NlU3ViTWVudUxhYmVsIjoiQ2xvc2UgU3ViLU1lbnUifQ==","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5ec6770aca50cd4c1fcc0b5bb6d40fe","sha1":"d853e9b91d963f111d50fea81ea4b45d59beae90","sha256":"624f13249f14f5cfbd9a8bac1db5040796059a3c1ea8559aef87ee46a97777f3","sha512":"3d30e36297e5a85c7fbc233d1aa87769363895c78a266a9082f8216d53245886b5d7e01327a6226b7317c2dacac09c91d12fd63b814cf76cdc83100453c97428","ssdeep":"","tlshash":"a5b09b6d5246a663d1913e441381d423c03108984209441ff15580dd6615d931ccd447","size":121,"data":"","first_seen":"2025-05-07T10:58:36.42153Z","last_seen":"2026-06-06T11:31:19.628911Z","times_seen":716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/3a5346b3ead6dace7a88bd50cc617011.js?ver=17011","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab2b109461499404e6308fc102ceba5a","sha1":"3400d0407e06e7746cb7b5b154b76aeebe6f5bb8","sha256":"0d5ef0324954e39c6b7804a30be454deaaed55369bdb76a965eb475e21e98d43","sha512":"f61bff510c3ac17ada29ab53682b03746cb73f6c1edd2ca51243a20f168fe865036f0dfb5312cce5ce1d3bf231e798dff0ad31bd76d47785029e0f738ce3e51c","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvz:bqHngROnvgJUqDi9cNYTnGvTbvz","tlshash":"cfe112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","size":7335,"data":"","first_seen":"2024-09-02T16:35:56Z","last_seen":"2026-06-06T11:31:19.608258Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-includes/js/jquery/jquery.min.js","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-06T14:10:08.542022Z","times_seen":890980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,IWZ1bmN0aW9uKCl7InVzZSBzdHJpY3QiO2lmKCJxdWVyeVNlbGVjdG9yImluIGRvY3VtZW50JiYiYWRkRXZlbnRMaXN0ZW5lciJpbiB3aW5kb3cpe3ZhciBlPWRvY3VtZW50LmJvZHk7ZS5hZGRFdmVudExpc3RlbmVyKCJwb2ludGVyZG93biIsKGZ1bmN0aW9uKCl7ZS5jbGFzc0xpc3QuYWRkKCJ1c2luZy1tb3VzZSIpfSkse3Bhc3NpdmU6ITB9KSxlLmFkZEV2ZW50TGlzdGVuZXIoImtleWRvd24iLChmdW5jdGlvbigpe2UuY2xhc3NMaXN0LnJlbW92ZSgidXNpbmctbW91c2UiKX0pLHtwYXNzaXZlOiEwfSl9fSgp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d14dddb96e6ab600e7f4c14ae6ec6365","sha1":"6bbfd860e16d4f4c00d66c7d3bfd4eb9efc75e0b","sha256":"6c04d2b8f182ee9d167f8c7fb6d4e4eec084f885a28c40f0cb8d7733cfdd1497","sha512":"9f664d3a37b2b68931059722b946f67044e70e64b90c5547675d32766bb8dec09e5aee6e3af46da58484bfdc71b979e514b09060aa867f48bf646b421701f900","ssdeep":"","tlshash":"34d0cd7b17561f3904d3729531efb3417b73075574c001076cb4c5492f645c581ba4c6","size":291,"data":"","first_seen":"2025-05-07T10:58:36.426196Z","last_seen":"2026-06-06T11:31:19.632269Z","times_seen":932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/a8bf63f23f82d8f11fc85882d0efd11b.js?ver=fd11b","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21da0bb1b0ac7618927d334b7c9ee247","sha1":"a2c5a878c360aa2f76568533c8d65d0e1d6bbc32","sha256":"b02a1bd2f5edd123afc1c15e23ce1f92e34bf1e6a43cf78d2552196d944cfe94","sha512":"1c5d7363a062c0b6d0a196491f82c460d69bab4e6a228c08cea0049ac68c257206c9d8ed66d5b087a725e33995f905997803b94249a0e7595951ac2080b7b1fe","ssdeep":"96:99Bn7Fg7QrvhwniNmL2dfqijZ5j0cu2v656fIvn66TEJ37O75XQTJAF:NiGaIfNrQh6OnhTEJKf","tlshash":"08e1c4fa3120b4b38aeb8276622f534677311162744b1018a76ddcdc2a74a67c35bff8","size":6886,"data":"","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-05-03T22:45:27.326925Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/5c8f6a6040c8272505dd61228b85a619.js?ver=5a619","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6cbf0d60a86b8e2387febbdd4fe53d5","sha1":"b2e6cc3333eaf9dd2bbe2058a1f4cc0240694504","sha256":"8d32520ff33a3b4c86e7873e8c9654da000f19591921a7d6f6cfee312b1cf493","sha512":"3040c1abcfc1ed6a44eb7d9e17a515ad9e237e0090033a279981de5b3157791ea400922ee0662db029426314c7803d1f00a7a87cdebe6b643a9bc16772e6beb2","ssdeep":"","tlshash":"4061caed7794f57215ebb2b5506f960af7311849584f18204826fc483c7e9da0252e7d","size":3316,"data":"","first_seen":"2025-06-18T00:33:48.592186Z","last_seen":"2026-06-06T04:37:04.543394Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/05d9219c10c2c486ed93a5a061dcda69.js?ver=cda69","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47a628aef2f254c32c3b5878700a42ce","sha1":"43814a498670a432b6a73cc80e67bdc738313ea2","sha256":"ea64f589334f647f2254d595466c036000a3d9150ad078a69eba7f845c0c0713","sha512":"2dad1648412fe67306b86320bc4ba90a681086b4e799528ea9783157fdc1fda64dede2e9e7958d0973156ed3d9084034422ed9c4794bedb5c7b8151917540671","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORl:5rprxaefKI0LP19m4q1WW+h4Mjw","tlshash":"5e52c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13578,"data":"","first_seen":"2023-08-09T06:09:09Z","last_seen":"2026-06-06T13:38:20.966069Z","times_seen":12902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3fb31fc4a0b37980210c57f2698989d","sha1":"82a161b3a63cf0d5a5b37e9eacdfaf298bcbb55b","sha256":"45200934a32157fcedfec503f25c156ed7a19df9a9538269e7848ad8f1adc936","sha512":"69f23736f39a72a620c7ee834ab1745e31b0289d9724365899af60148af4a28c26c7f2bfd64649776390a2301775e2c5be863604d3c932f264eaf572f0c2b3e7","ssdeep":"","tlshash":"0fe0a330f14849201040c569f274c41110b2ca85dc2aed30f38db818f830989c1b7df7","size":408,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-06T13:38:21.066464Z","times_seen":15603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/js/site-mod-3.js?ver=2","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b45b0ba0a46d4cc2fb4eea0b79b8a96e","sha1":"f94ba488ff82f59bfa6534d125386f1f1206b94c","sha256":"bd66205ba51b47998366c1d1bbc396fecd68934edded5b468bb47e2f72186a26","sha512":"7951bc378851632e0e25d8b0ae06ca69d3d40c9e937b700d7be1dfbc2b557609fb283d70122875d1b5ac36a49952587f6a79e5685353146302f3985ff23aef1f","ssdeep":"96:fNqP2BpqP2AG12UvRTNkbSBVZb+EbLnyiaWLrmz92Mg5CabO5IfZE83/N3S:fNOSpO22UJ0uwdc6ZNghfZE8313S","tlshash":"f3d16184f7bc3e65527a30ea8a6fa0c9023d5477e942496df8fc01681fd07687692e1b","size":6284,"data":"","first_seen":"2025-10-01T16:18:10.433455Z","last_seen":"2026-05-03T22:45:27.329055Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/js/bootstrap.min.js?ver=2","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"945d63a052556e65e561e40c7a70afc0","sha1":"f6eb11e8daa2bc57932448000c474d47f23a919c","sha256":"84f2a1724364ccbc501d662637bc95e02597cef9518254ff3f0ed2aaf4c70b00","sha512":"99b0aa8a08cd6499490b53a3124109bb7f374050681e66f242ae1b9fa4575a48322695e42a9bd799006b203fc9a8c852d409e0c898bbe18790e457aed6b95ca2","ssdeep":"3072:35lP1GJULL6zfGevmRzMMdZfupgbJ3klNyYMZlvIqxGcTJ7PBTyCvMjd:35Z1dL2fGevmRzMSZfupgbJUlNyYMZli","tlshash":"f3e32b4e7250746242af5166923f420ff2376859e10a81a8b45cd4dd2dbcec932bbfbd","size":156380,"data":"","first_seen":"2023-03-07T13:18:58Z","last_seen":"2026-06-04T05:07:24.170638Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/style.css?ver=1760600718","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:12.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/style.css?ver=1760600718 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 231\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 08:33:34 GMT\r\netag: \"1ad-68f0a28e-64413e6;br\"\r\nlast-modified: Thu, 16 Oct 2025 07:45:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 15638\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVZb2MOk9IYGe382TSopa7WtgAsnW8FuN%2Fn%2F7CwGTk4P8WPdOjdogT0FSETcXm6mZCqdwpfvxHwBXPUsTZUCR6nYQFbvtMN0Nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50ba9dc40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de61aab996b5949f9be452409471aac4","sha1":"595e90e4242f082df1e4e70e18f1e5fcedc67812","sha256":"a10d46e243fe1af732851395b4809b56c7eaefa3f1a79c1581cf6fa92f40acb6","sha512":"43e24370626ad841b872124d57a0d601d43e3eb014fa261b3e3e3ba100f72302ff05513f7b41960946180a1879b74661aa4aea2f88a0cfed937b3f13c5b82b79","ssdeep":"","tlshash":"cae068b2495296b1b53647167835f110cfa5620c2fb198b3f8ce19470b50ea2c17af9c","first_seen":"2026-02-04T12:54:39.513686Z","last_seen":"2026-02-04T12:54:39.513686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-apk-no-watermark.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-apk-no-watermark.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T14:09:45.529761Z","times_seen":16180173,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-mod-apk-premium-unlocked.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-mod-apk-premium-unlocked.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T14:09:45.529761Z","times_seen":16180173,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/3cd4d845539aa34cacb35da2d950b9b1.css?ver=0b9b1","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/3cd4d845539aa34cacb35da2d950b9b1.css?ver=0b9b1 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 14533\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Feb 2026 10:58:42 GMT\r\netag: \"1d37e-697da66d-64413b5;br\"\r\nlast-modified: Sat, 31 Jan 2026 06:51:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352530\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lf4zWx8tviD7cK8%2BZlj0bowc0ZTqfs%2BuOkhToIv31LTlL0GzNkl6ga8BH%2BeUx0e5i1aBSy9wEAeFvAjUVr3O%2BvE60m%2B0ek41yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c15b27783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":119678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"05e2a4e02dff5907ea8725dd3a1b53da","sha1":"3502d576bf89894b6879c2fa89883276cd881f16","sha256":"b2a5e071f1b6b1df56880cc9eae21ec55d4836df9893174e4df56a6270c764cc","sha512":"0c9df9477db55180331bea59a04fceb7d6c7147b27ec39a535abf77c3d0db201fb71f6ef48033872dfb1cf670ed3f84c9874a394e4e3f492552613a26cfcc42c","ssdeep":"3072:XoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:BfUQg5MG7x+qehvX02dclkWiF0","tlshash":"1dc3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-03T02:38:40.866052Z","last_seen":"2026-06-02T15:08:50.195795Z","times_seen":1002,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/3515c732a1f711ad4b4c9927bdfbd668.css?ver=bd668","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/3515c732a1f711ad4b4c9927bdfbd668.css?ver=bd668 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 165\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:45:26 GMT\r\netag: \"48d-69824473-6440337;br\"\r\nlast-modified: Tue, 03 Feb 2026 18:54:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 527\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rCXiQikK2NpSK74guvSiN%2Fdw5zb91Xu95F4%2BTBrIA%2FZdK1x%2FDldhH7IEER326N1kmQchC%2FZDkSkRCEWPVRbewDFyb2H5kvMoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b68783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1165), with no line terminators","md5":"d7c046cd5555f0de3c3c5fa846b6044b","sha1":"dfe54cc18295b2eb476d98781962913354bd2aa1","sha256":"187c2a0a016f532b73a680d2ec1095537ee7c6a545833c6c244571fdf3c9f7c9","sha512":"79235dacf9b5d5b24043455b813389bc02437bb2a4a217f1a29e3db9964b69680e465a6bd3f3dc5da1d586d0f86482987c6bba4b2b02796e363f7203b8e0e3f8","ssdeep":"","tlshash":"62218c0325edeca675d58a6d03880082f565fcf8efcf9bc122264a390c49f9d8499f0c","first_seen":"2025-12-03T10:12:33.07138Z","last_seen":"2026-06-06T12:04:09.901085Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/js/site-mod-3.js?ver=2","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/js/site-mod-3.js?ver=2 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1948\r\netag: \"188c-68efac28-6580b9d;br\"\r\nlast-modified: Wed, 15 Oct 2025 14:14:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 526\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmfk8h7RM05lkYT%2Bl6hRASW36xhBvGbT8m9nPjIB8b0L%2FVeIvswh1ZjaBaT%2FADKN%2BMAcw2EA4SZrsGzElqiif9WFgTVM6crCTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c17bb6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6284,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (632)","md5":"b45b0ba0a46d4cc2fb4eea0b79b8a96e","sha1":"f94ba488ff82f59bfa6534d125386f1f1206b94c","sha256":"bd66205ba51b47998366c1d1bbc396fecd68934edded5b468bb47e2f72186a26","sha512":"7951bc378851632e0e25d8b0ae06ca69d3d40c9e937b700d7be1dfbc2b557609fb283d70122875d1b5ac36a49952587f6a79e5685353146302f3985ff23aef1f","ssdeep":"96:fNqP2BpqP2AG12UvRTNkbSBVZb+EbLnyiaWLrmz92Mg5CabO5IfZE83/N3S:fNOSpO22UJ0uwdc6ZNghfZE8313S","tlshash":"f3d16184f7bc3e65527a30ea8a6fa0c9023d5477e942496df8fc01681fd07687692e1b","first_seen":"2025-10-01T16:18:10.433455Z","last_seen":"2026-05-03T22:45:27.329055Z","times_seen":22,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/3a5346b3ead6dace7a88bd50cc617011.js?ver=17011","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/3a5346b3ead6dace7a88bd50cc617011.js?ver=17011 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1683\r\netag: \"1ca7-69833d69-6460e45;br\"\r\nlast-modified: Wed, 04 Feb 2026 12:36:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 526\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdzQta%2FLhz4y99ssDtRPqIZJUiWDs2z3PxnaV1rdUryNYbgbhZ1HWplWB61AoFljw2J6qNyTZ9564fkVS15kzK5y1g65Y2VHpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c17bcd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7335,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7333)","md5":"ab2b109461499404e6308fc102ceba5a","sha1":"3400d0407e06e7746cb7b5b154b76aeebe6f5bb8","sha256":"0d5ef0324954e39c6b7804a30be454deaaed55369bdb76a965eb475e21e98d43","sha512":"f61bff510c3ac17ada29ab53682b03746cb73f6c1edd2ca51243a20f168fe865036f0dfb5312cce5ce1d3bf231e798dff0ad31bd76d47785029e0f738ce3e51c","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvz:bqHngROnvgJUqDi9cNYTnGvTbvz","tlshash":"cfe112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","first_seen":"2024-09-02T16:35:56Z","last_seen":"2026-06-06T11:31:19.608258Z","times_seen":960,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T12:54:11.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-dns-prefetch-control: on\r\nx-pingback: https://capcut.to/xmlrpc.php\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://capcut.to/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://capcut.to/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://capcut.to/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEOUUp9o91c6xgYl2g1DZzVLOjfMlV8JU6A1tgQwSSRdySxl2SJ8D4buvi9kNeMIozfZJ492AU4U9K2m64bqjPLpCoz6f%2FA%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c8a50b4cfda56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":154444,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19246)","md5":"a0e2b622c0e2153bb3f667b4093506f3","sha1":"0da23e90c88d38be0c1674b14b7a73874faa4264","sha256":"ba34e618800fe1abf95ee85f7e31391fb6d32dcd0ad679b5e8b27dd12d0729fd","sha512":"fa2695605db30f2db2a466d0315fa568c91b19d72bb9eaf56065336077435355c2ec85ed1fd964d1893a8766aaad04c7abc019b25b5c2827bba2bd2a6ad22e1a","ssdeep":"1536:txMeJ0GLaZmFnpPYypXtzkt2X4Z//bdVVt6lFsPoFolwOWwWqqct70zYGxuUey08:tmeJtpP5KoFoBv7e7P28","tlshash":"f2e30952a39458fe329b87a9272da748721b9506ca050fe7f56ed1ac538cfc408b3f4d","first_seen":"2026-02-04T12:54:39.518078Z","last_seen":"2026-02-04T12:54:39.518078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":69,"dns":48,"connect":1,"send":0,"wait":682,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-capcut.to_.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-capcut.to_.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 6361\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Feb 2026 10:58:52 GMT\r\netag: \"18d9-68efdc7b-64413da;;;\"\r\nlast-modified: Wed, 15 Oct 2025 17:40:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352520\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2Bn5UM8rtoUQGkgGLsWyPmEpZts3nnGYefY35ttUdr5FMRZd17NZICPQUqMHIQ8%2FqsjLRQ4Ub6eUcI2XmZSTzwbMwdJgbsdxiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50bbc9940daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"b58bd0474767a4ea9e4a3c6ebf33744b","sha1":"3300aa8518ec99ffd0d83c11dcd578f90e62c573","sha256":"ae8316d463a408da09fa0234869f0769223f5915c3466293eaa929b877140a8c","sha512":"bd19f7523203ca86305dc69fb96bb3ccb0c6cc99b6e4577a262c98af22c212e73fec637626587ee84152b3d129154a808df1f6094b12d824ceea0817664b7eb8","ssdeep":"96:eaqxGQNlLtSwVI4z5R/G3ZE/eZVS6qWYfteYOixlHs7fIPLKQJiaDm/xT:S1ZI4lR/s1U6kkwLHsSLHF6V","tlshash":"f5d129cc8f7121e328ea527758e71bb0c4160a5788d29181e9d69ccb3c41f93a6be787","first_seen":"2026-02-04T12:54:39.519038Z","last_seen":"2026-02-04T12:54:39.519038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T12:54:13.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-dns-prefetch-control: on\r\nx-pingback: https://capcut.to/xmlrpc.php\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://capcut.to/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://capcut.to/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://capcut.to/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tvOiTy8ukB%2BPfgCiYGcvm3CFjUfdny67d4HHK%2FEeYAf1Ur7cH8bQXo8azd4P8Z6%2F9infewgKUGwjDomg8%2BdpVf7okZ3JaFVvMA%3D%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c8a50beff070731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":138532,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19246)","md5":"9dd54a694d471a78cb392d9c1432ae16","sha1":"b0b0bb6b48642eec1aef3595d39974fd524faccd","sha256":"d855848a6de6ca6615a50b0d517c151d9f31895b7ca1ac9a5e1f79832466f9f4","sha512":"6dcb112309467705040bdf04d44429f938d4d22e5d9530d79fa6e39aa6db9193cf4869cc2705d79b4815ce9da1cfb808ce6b48d2bd544ba8ec5d36aabf7016b0","ssdeep":"1536:tgEeJ0GLaZmFnpPYypXtzkt2X4Z//bdVVt6ly1aX36gsPoFolwOWOWqqctw0KYdm:t9eJtpP5EoFouieX31","tlshash":"76d3e963939458fd32df8769276da748621b9406ce490febf46bd19863ccac408b3f49","first_seen":"2026-02-04T12:54:39.520145Z","last_seen":"2026-02-04T12:54:39.520145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":10,"dns":3,"connect":1,"send":0,"wait":343,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/79e02b5ecf0519b3a26b2d4e0613d3e5.css?ver=3d3e5","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/79e02b5ecf0519b3a26b2d4e0613d3e5.css?ver=3d3e5 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 4364\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 08:33:34 GMT\r\netag: \"4c38-6982f74e-6440321;br\"\r\nlast-modified: Wed, 04 Feb 2026 07:37:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 15639\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXmnHccJT0HtwbWhXgDZzEcyLl8%2FkLwTc48j2A9U5V5QUfRPwNCzk0uj4X7N7gK%2BnseicWwpA2dY5ltqPeeewuA9k7%2ByfydAng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c15b40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-06-06T13:29:15.738499Z","times_seen":13218,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-apk-no-watermark.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-apk-no-watermark.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 6118\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:54:13 GMT\r\netag: \"17e6-68f07cca-64413db;;;\"\r\nlast-modified: Thu, 16 Oct 2025 05:04:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUysTxiRbXMBKUX%2FyQWYCh%2BIP5%2BqijPmuXu%2FWJ%2FJshxzU%2FHC%2FnCMU8uw1n8YBRWQaWz5acytKPOzoHXgY2xb9Fh%2Fc3eNKBPASw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b81783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6118,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"888b4bdcd9bdc8509a97a4192dbcb04e","sha1":"d0934a0b8a6e24eef2f266b82e2bb5ddee9e28db","sha256":"4572c4080fc8284383753667093c54a2fbe64e68c8247b320a24d05e8b58dae8","sha512":"adb792c15b7f360f8ff032d255cce15bc5bea7d1a5fdcf98fc601554b576adebb6ec5755565e5872c4c129d9f8847f5f325e430b9aa1ee0b2fc43eb153902843","ssdeep":"96:naqxGzNlLtSwVIajvD35puXJ0j6CQnw0Uk5oxSl6U2a9viiwKdjFSvOvRhyZX:jkZICvDHuKWXwbE2ajHTsOvRe","tlshash":"3cc14cd11f9021b3d409e63e84f79874c0535b8a48c121ca78dc8c1bfd84b9186b7997","first_seen":"2026-02-04T12:54:39.5227Z","last_seen":"2026-02-04T12:54:39.5227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-apk-chroma-key.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-apk-chroma-key.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 14392\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:54:13 GMT\r\netag: \"3838-68f07d4b-64413d6;;;\"\r\nlast-modified: Thu, 16 Oct 2025 05:06:19 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yY49j4WIJYlxl8Hobt4PDpnXlf2%2FpIfTZre6F7C0MC3dn%2FttlOnnlOahk%2ByhBMErjGHIxQWEkkQUcmiLUYJ9enNvPmjTzSO9DQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b8d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14392,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"40ac976d315cb58d6575d73c21bee1cc","sha1":"dc52c190862139070eca17fc3f605dd2b8fe977c","sha256":"2c378062d31aa8639a56f5e92341a4e4d96ebfa34a52962d6424561c9f4933e6","sha512":"3de9f3197b948c8145607a336bfd728acbfbe0042079c39b1ed749e1cafec2ddac05a8893058a578d2e049bb5ed0e1a22fb35e7bf8f299b18987691a30edad0f","ssdeep":"192:j+eIXBStAJ6ZUvx7DmaQugOECECXc5NykZdsVNZHfknMRp1EU08UbTwdjmV7Y7O:j+eBt5UvrgukiRV/+jMK7YK","tlshash":"1452bfee3c3281631aa5bb00acef2874c9534f574d41396b44d49ec1aad01b7b73b5ab","first_seen":"2026-02-04T12:54:39.523574Z","last_seen":"2026-02-04T12:54:39.523574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-apk-keyframe-animation.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-apk-keyframe-animation.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5747\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:54:13 GMT\r\netag: \"1673-68f07e8c-644042f;;;\"\r\nlast-modified: Thu, 16 Oct 2025 05:11:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UquuHo7NJKEX3M%2BpgjqcNqrQazO9%2FYwZn4G6tJmdcf8SgXWYp4A0mlMKGlibXTVv0Q1iV7TWd36CWBgqx7wDsgzJIzNNcY6N3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c2bf65783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"300ba6c69d3c89941aa76c3d081148c2","sha1":"4d8efdbb4283f97eb9d10f56714f7f634b1ab730","sha256":"a3151f9587c0399d1792292ff322fce19ca02936c6006f787ab0d73822a7b1ff","sha512":"a19d8d3610d2597b8066f9f4d68f09cffa453b96dde08ee059ebcab6dd44f06cad775c2e0a65a4901d39a04a938cdb247a095f45463f9e49a6145d6d1b26af1f","ssdeep":"96:naqxGCYNpLtSwVIadr0OdR1NWw5Vq6aa6YXKwY0H0h3bOjnqYN/I4OqnpDySPgWH:jZw1I4r0OdR1Nh5VqtYXKwY0HErOX/As","tlshash":"40c15b8a8fa21293e6cd26474dfb25b8e4130882acc0205e6ad78c5b7c507944fed68b","first_seen":"2026-02-04T12:54:39.524481Z","last_seen":"2026-02-04T12:54:39.524481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/css/bootstrap.css?ver=2","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:12.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/css/bootstrap.css?ver=2 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 23106\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 12:08:52 GMT\r\netag: \"29542-68efac28-6580b99;br\"\r\nlast-modified: Wed, 15 Oct 2025 14:14:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 89120\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5fge41%2FBQkGATMIjuFsOxzZShTU7slZvf9CJBB295u459WTkkl4eZ2ZU1GT5aPDiHzTc5J%2BqiO%2FWeIyWL27g9Dj5R%2FJisdw8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50ba9db90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169282,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65320)","md5":"39208123cb08fb536f200ac875cf1783","sha1":"c3325c8b0fe08a0c0346ec5f0bcb0754198bb5d9","sha256":"3af041ff22b4e576d93430932d2062425b187b5f8ab159b2e188023a1ca9d86f","sha512":"39e4c8f6756f0bd3ea6455f101462f38298e0c750c77e5d91cafc01d8e7ba9afc12b8119a0e9b26c118965b50d50f63bf205ebc7ed285cb92c432cd676ce672b","ssdeep":"1536://xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26Sf0://Riz7G3q3SYiLENM6HN26SM","tlshash":"e7f385a6f5a0312dd4a7c619a0d0bafd553f8145d7220bfbf8277b6487892c70a63e4c","first_seen":"2025-10-01T16:18:10.389227Z","last_seen":"2026-05-03T22:45:27.320774Z","times_seen":22,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/CapCut-Pro-Logo-1.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/CapCut-Pro-Logo-1.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 7581\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 08:03:49 GMT\r\netag: \"1d9d-68f09b9a-6440436;;;\"\r\nlast-modified: Thu, 16 Oct 2025 07:15:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352528\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4c853%2FLKDFdaWw8%2FNg6a9aM%2BoY3W1GDHgPGSY8UlopUiRrJKBOm2YDdyj9EqabUKxxtRFRkbt%2BWUmkLF9CCOEghiTfvIKQ5BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50bbc98b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 550 x 100, 8-bit colormap, non-interlaced","md5":"bdec8c0c2f1cbbf4ced3bf1c90d95155","sha1":"bdf5c78771d69f9a2391ac34055effd754aef211","sha256":"4974c81c9b12c28798d0ceaf43bcd77582142520f6f5be0da3c658f370ec1c1a","sha512":"0749d26fcacf99573b7f7791633e808cd6c3e5675b57b28d3c970e355e45ba174cff7ff00b887c307f7c24fa83e3c465d489c0867ce0d0a2deb59c860d5466b4","ssdeep":"192:u23rIfBwanMKPrimtgMEYom4J/eMvpDth/5mLypl:uArOBw0zxEU4J/eMFth/5mIl","tlshash":"72f1aee8d99123f34f6da9d608f564b4b777c166cac43186c4c784172c54b58c9b6147","first_seen":"2026-02-04T12:54:39.526164Z","last_seen":"2026-02-04T12:54:39.526164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/plugins/litespeed-cache/guest.vary.php","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://capcut.to/\r\nOrigin: https://capcut.to\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-robots-tag: noindex\r\nx-litespeed-cache-control: no-cache\r\nset-cookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1; expires=Fri, 06-Feb-2026 12:54:13 GMT; Max-Age=172800; path=/; secure; HttpOnly\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8sM1qg4SvOftksNsEyep4HeNjur3DjK4A%2F%2Fvh7aBBURVwGvbOgZrp3hFf%2BxVfg2TuLa%2FlSDoypt1mbNsSWQ6LnfbinyqarlSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c8a50bb88ac0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"e2bb2c7e02e214822b4ffffc314ca27e","sha1":"2d193e2847595361f1b0ce151dfd28c2f855c510","sha256":"76fb65f605df2b2d124684c3c4ec3e0c75fdf013b2727af6cdb68b73b5c8a9bb","sha512":"acd30fcff40e16a4a59148b85a496dad9946906d3e1c998d9b6fbfc8f8474a828489e9f129eb20f3c3588b3fc55cb3f146c1c457a2f4d51d2dc115ef88d044f8","ssdeep":"","tlshash":"92600000220c820202200880b080000000800822888a80e08000000080008800002a22","first_seen":"2023-04-05T13:39:14Z","last_seen":"2026-06-06T13:11:07.124209Z","times_seen":12509,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-apk-keyframe-animation.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-apk-keyframe-animation.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T14:09:45.529761Z","times_seen":16180173,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/05d9219c10c2c486ed93a5a061dcda69.js?ver=cda69","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/05d9219c10c2c486ed93a5a061dcda69.js?ver=cda69 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4681\r\netag: \"350a-69833d69-6460e42;br\"\r\nlast-modified: Wed, 04 Feb 2026 12:36:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 526\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYUBygA6fTLPJ15eOa%2Ft47Gw4HKhWc1QokRTrnMKDXd1%2F6mX%2F91h6MTzeCaIjmoHtaR%2BD7QxSDLQNUt6B0q%2BCYxLqa6VVB0Fag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b7c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"47a628aef2f254c32c3b5878700a42ce","sha1":"43814a498670a432b6a73cc80e67bdc738313ea2","sha256":"ea64f589334f647f2254d595466c036000a3d9150ad078a69eba7f845c0c0713","sha512":"2dad1648412fe67306b86320bc4ba90a681086b4e799528ea9783157fdc1fda64dede2e9e7958d0973156ed3d9084034422ed9c4794bedb5c7b8151917540671","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORl:5rprxaefKI0LP19m4q1WW+h4Mjw","tlshash":"5e52c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-08-09T06:09:09Z","last_seen":"2026-06-06T13:38:20.966069Z","times_seen":12902,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/js/bootstrap.min.js?ver=2","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/js/bootstrap.min.js?ver=2 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 45701\r\netag: \"262dc-68efac28-6580b9c;br\"\r\nlast-modified: Wed, 15 Oct 2025 14:14:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 526\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00Z%2F8N%2BPuQBOHBvR5w0Qf%2FnBjmnrmNSqKIA%2B2n0md%2FV1eN3L%2BYZY7RsS5hWB0RNMmaxLxdsThuBtIY1pGbQA6%2B2u6TMWJ%2BcLsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b9d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":156380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44101)","md5":"945d63a052556e65e561e40c7a70afc0","sha1":"f6eb11e8daa2bc57932448000c474d47f23a919c","sha256":"84f2a1724364ccbc501d662637bc95e02597cef9518254ff3f0ed2aaf4c70b00","sha512":"99b0aa8a08cd6499490b53a3124109bb7f374050681e66f242ae1b9fa4575a48322695e42a9bd799006b203fc9a8c852d409e0c898bbe18790e457aed6b95ca2","ssdeep":"3072:35lP1GJULL6zfGevmRzMMdZfupgbJ3klNyYMZlvIqxGcTJ7PBTyCvMjd:35Z1dL2fGevmRzMSZfupgbJUlNyYMZli","tlshash":"f3e32b4e7250746242af5166923f420ff2376859e10a81a8b45cd4dd2dbcec932bbfbd","first_seen":"2023-03-07T13:18:58Z","last_seen":"2026-06-04T05:07:24.170638Z","times_seen":430,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/db4d38b81149e939b99f6f53cf303b26.css?ver=03b26","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/db4d38b81149e939b99f6f53cf303b26.css?ver=03b26 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 288\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Feb 2026 10:58:42 GMT\r\netag: \"388-697da66d-64413b6;br\"\r\nlast-modified: Sat, 31 Jan 2026 06:51:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352531\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GajPpsuPxeaVgg%2BRLZe%2F8vf%2BeS2CpYeYGL05MijZdNxv9qBvIFtZJQxmKrUnrxdmNWzD22P3bAs4rc9JERvEVTiDZy%2FvUVbwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c15b2d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":904,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (904), with no line terminators","md5":"e2aa8be7072d6e27b6d3451a81144309","sha1":"b5b7c246a4ea0e68009e4604712c766907dfca7e","sha256":"43886f156f6788465fdcad5b1cb939257806122b1d6718fc63f0e9b9cea4a45b","sha512":"f5c3e13ea406b2142aa00e16addae67fdbea3cd148a8be1265bca0af12234f28f51b6a3dc8df076148bde4550005989367e7960befa2cbc1bec774c4d7bcd54d","ssdeep":"","tlshash":"2b115ca269977110b32bc3232490b7d67c31f12afcb7d3b0daa0958dcec7269554224d","first_seen":"2024-07-11T23:57:20Z","last_seen":"2026-06-03T00:13:26.806661Z","times_seen":2147,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/style.css?ver=1760600718","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/style.css?ver=1760600718 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 231\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 08:33:34 GMT\r\netag: \"1ad-68f0a28e-64413e6;br\"\r\nlast-modified: Thu, 16 Oct 2025 07:45:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 15639\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BudKrXZmAEkeI7KfImszF8Mt5NOXQO3zVXuqETXQdRUJ7vYu119eKd3QEGfPqdG1TfFUprSsArNmKvu8UGxLNcPDxkkYCJ%2Brw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b52783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de61aab996b5949f9be452409471aac4","sha1":"595e90e4242f082df1e4e70e18f1e5fcedc67812","sha256":"a10d46e243fe1af732851395b4809b56c7eaefa3f1a79c1581cf6fa92f40acb6","sha512":"43e24370626ad841b872124d57a0d601d43e3eb014fa261b3e3e3ba100f72302ff05513f7b41960946180a1879b74661aa4aea2f88a0cfed937b3f13c5b82b79","ssdeep":"","tlshash":"cae068b2495296b1b53647167835f110cfa5620c2fb198b3f8ce19470b50ea2c17af9c","first_seen":"2026-02-04T12:54:39.513686Z","last_seen":"2026-02-04T12:54:39.513686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/e6c574f387262b8fa1326277bb85b99c.css?ver=5b99c","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/e6c574f387262b8fa1326277bb85b99c.css?ver=5b99c HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 285\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:45:26 GMT\r\netag: \"28f-69830739-6440336;br\"\r\nlast-modified: Wed, 04 Feb 2026 08:45:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 527\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSFmlXgTXP%2Fvt0hzJRwGp6AhRcM0TbSH3KUSp%2B2PNx0FhyBkgYLE4IxGy1C21txvCvuTw99nyI%2BaxCiyQ0UV7i%2Bv1t%2BoINIv5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b5f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":655,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (655), with no line terminators","md5":"daa09a2e36a4965d0c1c28f872dc1cd7","sha1":"9921ed1529cbb7f2427b64cc397e09cdae3cccb9","sha256":"622f970d122913e7a6707d8be35940b9417f061eb64b21c3bf1b01b76bfccd62","sha512":"660f08aebae587382001db573b37644b1bda6edb28997adf91617d8a035b2575b8342926521bf965e7b4118ead582ade66c77dd5f057657199f36261e2ba30a3","ssdeep":"","tlshash":"f6f023c193d28d0454978cb72b86d3c4a4497843e5bec7a7825541574c87a3f1a4370c","first_seen":"2024-10-14T22:23:32.664386Z","last_seen":"2026-06-06T13:25:40.509125Z","times_seen":6322,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/CapCut.to-favicon-32x32-min.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/CapCut.to-favicon-32x32-min.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1342\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 00:57:00 GMT\r\netag: \"53e-68f09900-64413d0;;;\"\r\nlast-modified: Thu, 16 Oct 2025 07:04:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 302233\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zNlvZM9GcM0nxe2zKrl6hFPuN8y3prw5dy9bn1je4D6Pb5LOsleiH2vNQUeHx7PfxBY5W3xJrOx5XmTCa%2FLcVQNcXuFuL2YTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c2dff0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d0419eae93964f6b025f6b5f675564a4","sha1":"ac22a0d890ba8f0bc76b91ba807c1eb918cda388","sha256":"1a8a3a8df908cf51cffddc5093423a0a5db2522de8854798e2c8a890b9bccc51","sha512":"4197ba6aa5e896a25a510eee287dc493d1d6d394bd6ca47f9b4e9ebdaa20471dae49b4c5ed97b287ae1d24f11c885700c19512d429e43934a70f5f0ec7c9e803","ssdeep":"","tlshash":"4821b607c559dc318b598bf62bb6f05bc93a91e22d263614917d53a7dd9dbf0200900b","first_seen":"2026-02-04T12:54:39.530145Z","last_seen":"2026-02-04T12:54:39.530145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/d41167f9132838eaa5c116bef76fd0f9.css?ver=440be","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:12.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/d41167f9132838eaa5c116bef76fd0f9.css?ver=440be HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 20727\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 09:44:18 GMT\r\netag: \"2639f-69803b7b-644031d;br\"\r\nlast-modified: Mon, 02 Feb 2026 05:51:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 184194\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tf%2FUMtgRibAx3J1UR4c1hXRTC8mPbBGh6LiNbW8Rj1QcWiD24t1N8DY6MmyHFQXHkCmmmzP80SP0OXKEleQXcP3ha3tSRG8WSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50ba9db20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156575,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"d41167f9132838eaa5c116bef76fd0f9","sha1":"9b516b070294c13edd16bee40d4d98aa5f940607","sha256":"a31cadbcd7f648e2c16fe3e6012ef1831dc8b2491b3764ca841135c57989e4cb","sha512":"054f3d76fd1266857af16515dd1f9d908cb3fe5461b81b158ef129160fe6918cafaed91f0f8601c0d46ee23629599f212fa56bbef82bd93a324b3f2025b91117","ssdeep":"3072:XoeJBCCUQg5MG7x+qehvX02dclkWwbFpPbJ06:BfUQg5MG7x+qehvX02dclkWiFVJ06","tlshash":"b5e3a44017f49cf935ff973aae8ee258a513a941c28a67e6f066d150618ca490df3f0f","first_seen":"2026-02-04T12:54:39.530995Z","last_seen":"2026-02-04T12:54:39.530995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/2c4a6ce9bee0a05fc5f6e7cc3022c925.css?ver=2c925","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/2c4a6ce9bee0a05fc5f6e7cc3022c925.css?ver=2c925 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 2408\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 12:08:57 GMT\r\netag: \"2f3f-6981d8d5-6440334;br\"\r\nlast-modified: Tue, 03 Feb 2026 11:15:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 89115\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HO9icultLY8QIDJQUhBZV1ZUM93LAh%2FWfquAFR141WNODcL7TkcVJlvsvyZS%2FkckKDNzPPuKTS65OBNDfWYGS8xGw7y8Uh05Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c15b49783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12095,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12095), with no line terminators","md5":"4a3f5dc0764ef887f43f0a33b016e1ba","sha1":"ad51889c805716bd950bd1a6653f00c72192d965","sha256":"f558f2d3cf8ebc3ae3c2b714e5acd8221bd8f191cb8b56fe804631d6f315ae97","sha512":"9383fa872cd1a3a4ad37a71f01806f725113bf291c25d2b16be4779464eb5cd61b185ede5ec73813cee83eec7ae14f625bb4df5ff39318b9ce087c2dbc920482","ssdeep":"192:U2zuIJ07PVFcCQjcz17dod6kwTY83j0MNWEW6L/V6wR0u8KHv2TuKhW8QTWn+wRO:rJ07QYz17Kg/TYEjJN7H7xTWnqTUA2TM","tlshash":"2542a7c0c9f1313279bb023f77c2e21536a9e001e51637f871bbe66186c7ba65693b49","first_seen":"2025-10-01T16:18:10.425543Z","last_seen":"2026-02-04T12:56:46.881663Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-includes/js/jquery/jquery.min.js","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29597\r\netag: \"15601-68f0a530-6440906;br\"\r\nlast-modified: Thu, 16 Oct 2025 07:56:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 527\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmTv%2BOT1K65F6HuLmskhmLQzu2RQcpaS%2Bps5OvX90VKbZbd7w7WAvF7gsx%2B1iBmWf03vqF8P9HcjQb12aDb5dghWPPHQVp%2F6rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b71783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-06T14:10:08.542022Z","times_seen":890980,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/5c8f6a6040c8272505dd61228b85a619.js?ver=5a619","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/5c8f6a6040c8272505dd61228b85a619.js?ver=5a619 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1258\r\netag: \"cf4-69833d69-6460e46;br\"\r\nlast-modified: Wed, 04 Feb 2026 12:36:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 526\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arKZ26L0VD6DIkaeX2cdQmTouSX3ZJ6mSWsBf5sjbExdcl0ppAiKX0EoE2%2FjrfDbx%2BK3D9etKJLQUT5a%2B%2BVVdKeWYztMh4zE0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c17bdb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3316,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3314)","md5":"e6cbf0d60a86b8e2387febbdd4fe53d5","sha1":"b2e6cc3333eaf9dd2bbe2058a1f4cc0240694504","sha256":"8d32520ff33a3b4c86e7873e8c9654da000f19591921a7d6f6cfee312b1cf493","sha512":"3040c1abcfc1ed6a44eb7d9e17a515ad9e237e0090033a279981de5b3157791ea400922ee0662db029426314c7803d1f00a7a87cdebe6b643a9bc16772e6beb2","ssdeep":"","tlshash":"4061caed7794f57215ebb2b5506f960af7311849584f18204826fc483c7e9da0252e7d","first_seen":"2025-06-18T00:33:48.592186Z","last_seen":"2026-06-06T04:37:04.543394Z","times_seen":208,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-apk-4k-export.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-apk-4k-export.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 9540\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:54:13 GMT\r\netag: \"2544-68f07dd4-644042b;;;\"\r\nlast-modified: Thu, 16 Oct 2025 05:08:36 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHeR3XUlMtAvs3Vk5x%2F7G8xfOKyN780FwSKg2WgUIhR35TjVFfABsLk4uA6YPfep4HisjcV6KOYuW%2FTXbvvqanv9Qbe4TOaSOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c2bf52783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"db41c15f14dd39f44ab33a6c1133d5d9","sha1":"f65ba20e4877dafd9c60ee0cd47f2101899fbe47","sha256":"c675553f9de375ca61ee751e3ada88130d4ab56de2dae7c4f8902947ac535454","sha512":"66675f576672502b740a0e798b4dfb09fb5fe2c870fd5d0f75b3ca0defec2ef77849523563487b537734e3bd11bd77f49a148e458fa05b64942f053a383f3b26","ssdeep":"192:jRDIrh8/0W83/4Ywa8pFyCcAGm+DsUceq5NrJsrMH1gyPUvAwQCKuQIy+:jRDQLdwYwaaDGm+lxwrJmoHUrQCRy+","tlshash":"18129e796d13289396df3a4b3cee3d898667ea98c8c12563dde68c831c1489369bb051","first_seen":"2026-02-04T12:54:39.534261Z","last_seen":"2026-02-04T12:54:39.534261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-apk-4k-export.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-apk-4k-export.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T14:09:45.529761Z","times_seen":16180173,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/css/bootstrap.css?ver=2","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:13.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/themes/CapCut%20Pro%20APK%20%28CapCatPro.com%29/css/bootstrap.css?ver=2 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 23106\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Feb 2026 12:08:52 GMT\r\netag: \"29542-68efac28-6580b99;br\"\r\nlast-modified: Wed, 15 Oct 2025 14:14:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 89121\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMZdfHytExx%2BD7Egf09gSux4wHgTVbwE4nsX%2BFJq3IblVhiDStK52AMQMID4wF6tF806EkUQksl6zE4%2BeXXQHpdZEHjcPDSoNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c15b38783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":169282,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65320)","md5":"39208123cb08fb536f200ac875cf1783","sha1":"c3325c8b0fe08a0c0346ec5f0bcb0754198bb5d9","sha256":"3af041ff22b4e576d93430932d2062425b187b5f8ab159b2e188023a1ca9d86f","sha512":"39e4c8f6756f0bd3ea6455f101462f38298e0c750c77e5d91cafc01d8e7ba9afc12b8119a0e9b26c118965b50d50f63bf205ebc7ed285cb92c432cd676ce672b","ssdeep":"1536://xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26Sf0://Riz7G3q3SYiLENM6HN26SM","tlshash":"e7f385a6f5a0312dd4a7c619a0d0bafd553f8145d7220bfbf8277b6487892c70a63e4c","first_seen":"2025-10-01T16:18:10.389227Z","last_seen":"2026-05-03T22:45:27.320774Z","times_seen":22,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/css/b584ee8555d0391ab71a66d622c9c946.css?ver=9c946","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/b584ee8555d0391ab71a66d622c9c946.css?ver=9c946 HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 544\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Feb 2026 10:58:42 GMT\r\netag: \"a06-697da66d-64413b9;br\"\r\nlast-modified: Sat, 31 Jan 2026 06:51:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352531\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1OorA2AEZtO5izhqqXO4kCIWmjsQdMc5H%2FOfkPejwS0NS7sfCqSPclJXLt73zdHL6L%2FIyzR3%2Fzcljx3Ggz%2FJ6eyBucZ0z3fJAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b58783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2566), with no line terminators","md5":"ebc4817d78928435ca7eed8216d49e5b","sha1":"8e120ea34776bca556b3c6bccb361c45f0a7f964","sha256":"7c8eb7fd8354e29e58e77290872b6e05a65404a4d16fe26996b72b6f2f606281","sha512":"cbcc6cc2e06303e3e0fae560253b7f9438fef8a83f6a5dbf84d0b6f24ca9f4b8855e55e979dc55b41517a21ddb5e789f16957efa1e470978ad3b4a12110f8360","ssdeep":"","tlshash":"f8514bd9d1b8248640f34b2ff7d6865438f3a41452977a82a0db671548efe4607a3fbc","first_seen":"2023-04-06T22:42:41Z","last_seen":"2026-06-06T14:04:35.275463Z","times_seen":4900,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/f5ccaa3153b143ff661dad5c2a51fc0c.js?ver=1fc0c","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/f5ccaa3153b143ff661dad5c2a51fc0c.js?ver=1fc0c HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 377\r\netag: \"43e-69833d69-6460e43;br\"\r\nlast-modified: Wed, 04 Feb 2026 12:36:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 526\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2FBo0a8txtIBz8IedvKf3lq2A%2Fwft7hVKXrNvTgkVeXOZDVWk%2FWz5a3qVQK19A0SFc89jgxNHH4xHpRPnnSaJzUxDVfoWeo%2FZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b92783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1084)","md5":"0424a99246ebbfea80aa02c09cd2a5b2","sha1":"114f610e0d0c39693a498046aff2748e6bdb3aac","sha256":"d2be0a483ba77e6e689ceeeaede3d42e6ae31cb12227b947dfd45e746d27224f","sha512":"2d7656cbcfe04bab839d062501c190e8af3fb6f03166a963219e8084df44702087f9ff5ca3da740baf1399deb1cc1d4a66e613e36a67c71e93fb607d90f2582b","ssdeep":"","tlshash":"7511ad24e508b7b7117f23c838b2e1511033b63af6325a3273a211ba2c26980272a65b","first_seen":"2025-05-30T13:53:24.872872Z","last_seen":"2026-05-12T13:13:19.263949Z","times_seen":22,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/litespeed/js/a8bf63f23f82d8f11fc85882d0efd11b.js?ver=fd11b","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/a8bf63f23f82d8f11fc85882d0efd11b.js?ver=fd11b HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:13 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2539\r\netag: \"1ae6-69833d69-6460e44;br\"\r\nlast-modified: Wed, 04 Feb 2026 12:36:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 526\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2OKVLTfiT9EsAaq%2F%2F2vTBBQLe0466D%2BR6MImrQjxg1oEby1uyhtpYuJmrJK4YyYJs9jzt2MpmKKeoXIej7yhrDgeuHr9XW8LA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c16b98783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6886,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6884)","md5":"21da0bb1b0ac7618927d334b7c9ee247","sha1":"a2c5a878c360aa2f76568533c8d65d0e1d6bbc32","sha256":"b02a1bd2f5edd123afc1c15e23ce1f92e34bf1e6a43cf78d2552196d944cfe94","sha512":"1c5d7363a062c0b6d0a196491f82c460d69bab4e6a228c08cea0049ac68c257206c9d8ed66d5b087a725e33995f905997803b94249a0e7595951ac2080b7b1fe","ssdeep":"96:99Bn7Fg7QrvhwniNmL2dfqijZ5j0cu2v656fIvn66TEJ37O75XQTJAF:NiGaIfNrQh6OnhTEJKf","tlshash":"08e1c4fa3120b4b38aeb8276622f534677311162744b1018a76ddcdc2a74a67c35bff8","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-05-03T22:45:27.326925Z","times_seen":29,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/CapCut-Pro-Logo-1.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/CapCut-Pro-Logo-1.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 7581\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 30 Jan 2026 08:03:49 GMT\r\netag: \"1d9d-68f09b9a-6440436;;;\"\r\nlast-modified: Thu, 16 Oct 2025 07:15:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352529\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yR2r0wTm%2BNX3Y1QSJroTzAr8%2FOT3eFrbQXPrzn9SgZ8F%2BJ57ERzaStRaJiQ1pJvX82f4T55tBzn%2FEmvAPlDSkMSajuU8wZ%2F61Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c22de1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 550 x 100, 8-bit colormap, non-interlaced","md5":"bdec8c0c2f1cbbf4ced3bf1c90d95155","sha1":"bdf5c78771d69f9a2391ac34055effd754aef211","sha256":"4974c81c9b12c28798d0ceaf43bcd77582142520f6f5be0da3c658f370ec1c1a","sha512":"0749d26fcacf99573b7f7791633e808cd6c3e5675b57b28d3c970e355e45ba174cff7ff00b887c307f7c24fa83e3c465d489c0867ce0d0a2deb59c860d5466b4","ssdeep":"192:u23rIfBwanMKPrimtgMEYom4J/eMvpDth/5mLypl:uArOBw0zxEU4J/eMFth/5mIl","tlshash":"72f1aee8d99123f34f6da9d608f564b4b777c166cac43186c4c784172c54b58c9b6147","first_seen":"2026-02-04T12:54:39.526164Z","last_seen":"2026-02-04T12:54:39.526164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-pro-capcut.to_.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-pro-capcut.to_.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6361\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 07 Feb 2026 10:58:52 GMT\r\netag: \"18d9-68efdc7b-64413da;;;\"\r\nlast-modified: Wed, 15 Oct 2025 17:40:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 352521\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DImqsmS78jAncwtMGr0awHscuJKlhRZ%2BYxiWDWycM8joDUaEjdfCy0v8yXiOwhxHWYhgWhTk2G01mCGZB3SHuFavOiUWK9kDUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c22de5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"b58bd0474767a4ea9e4a3c6ebf33744b","sha1":"3300aa8518ec99ffd0d83c11dcd578f90e62c573","sha256":"ae8316d463a408da09fa0234869f0769223f5915c3466293eaa929b877140a8c","sha512":"bd19f7523203ca86305dc69fb96bb3ccb0c6cc99b6e4577a262c98af22c212e73fec637626587ee84152b3d129154a808df1f6094b12d824ceea0817664b7eb8","ssdeep":"96:eaqxGQNlLtSwVI4z5R/G3ZE/eZVS6qWYfteYOixlHs7fIPLKQJiaDm/xT:S1ZI4lR/s1U6kkwLHsSLHF6V","tlshash":"f5d129cc8f7121e328ea527758e71bb0c4160a5788d29181e9d69ccb3c41f93a6be787","first_seen":"2026-02-04T12:54:39.519038Z","last_seen":"2026-02-04T12:54:39.519038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/capcut-mod-apk-premium-unlocked.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/capcut-mod-apk-premium-unlocked.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 7872\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:54:13 GMT\r\netag: \"1ec0-68f07e32-64413d7;;;\"\r\nlast-modified: Thu, 16 Oct 2025 05:10:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNfYePqXZ1M6zBVBwizwbNr6WngL4BzLu7sVsBpNxeLwgBiNHHFfjg02X%2BBnuVPKC9%2FM0sbq9XptBvsj2%2FTywv%2F%2FT5YchqcWcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c2bf5a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"ef0e7e08b3a4f01f416b38777ddd8e78","sha1":"dea99c5683b008000dabd40747ff5cf3913b5165","sha256":"2695945c0b4b204c1e4c380e9211b390cc732f29bb839e6474090f70d2f81dbb","sha512":"1153223f7c63d7de5b21e5e13338ae4325beafcf3f7884213478a28aee826255a3a9400196a740b9fbf9d259a498455fa756132c7139bdae2cb328086a47b09c","ssdeep":"96:naqxGINILtSwVIaXYzdecHKL3bualKzdfL384wGBR23qOPRHFDIY/CcjOmp6vEsT:jxgIPzLHKLLujzdj38E23tJIY/2+6T","tlshash":"0ef17d9c58a727d14d067b6a9ea9f4e58d7335a1ddd0438e98c34ccb0d50cc09ba62cf","first_seen":"2026-02-04T12:54:39.537501Z","last_seen":"2026-02-04T12:54:39.537501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"capcut.to/wp-content/uploads/2025/10/cropped-CapCut.to-favicon-32x32-min-192x192.png","fqdn":"capcut.to","domain":"capcut.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://capcut.to/","date":"2026-02-04T12:54:14.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"capcut.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 13:33:28 GMT","end":"Fri, 13 Mar 2026 14:30:59 GMT"},"fingerprint":{"sha1":"DB:6A:D1:2F:12:6C:0C:8F:0F:CF:94:E1:14:82:0A:C5:3B:E7:48:74","sha256":"24:8A:E4:B6:FB:8B:FE:87:34:E3:7B:BA:D9:76:0F:8E:4D:23:F6:96:33:A9:EC:DC:D7:87:E4:24:D7:05:DF:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/cropped-CapCut.to-favicon-32x32-min-192x192.png HTTP/1.1\r\nHost: capcut.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://capcut.to/\r\nCookie: _lscache_vary=ed191ce7b97493a0f2abc577f2bb72f1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 12:54:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6119\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 11 Feb 2026 12:45:25 GMT\r\netag: \"17e7-68f09fd4-6440433;;;\"\r\nlast-modified: Thu, 16 Oct 2025 07:33:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 528\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yavcwhLhzSxMWDnHN2Ohzn6qOXGXZEpYPMLYh4wszj%2BqGK4fCYsqLEMK%2FLG%2FXpd9PnVMJm6Gu2%2Fb61531DTLdmKrlYJd4tYhog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8a50c2dfeb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"f76c4d280b4b3e9d0e226a73f7aa9775","sha1":"451f29178e3bf08a85479b9f41f9588568a7e44e","sha256":"895c0fd9642deccec87328dd289df8aee692afe4234a8c47e97fb95bacc21396","sha512":"6211adff2b038817b88ebe7f4ab2c444d05c1e62d4a8f83b9ec9f39cdaabdaccfe7e7d24b6356daff4da16962edb398bc574d389895b4c869e79158231bd2271","ssdeep":"96:/oFr0u1yVkQDVoIkSlsl7HY+3cVX1QMHoa0x4uL94/c1s0c6Ta3HBHdylzPmK:E0/6OohSlslgVX1QMIa0xierTa3XMr","tlshash":"3ec1afc08d6e6dfb44066c9b8d18be40f0bb53da7b679c8425d651824c87f4dee92612","first_seen":"2026-02-04T12:54:39.53857Z","last_seen":"2026-02-04T12:54:39.53857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"capcut.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}